Designing IT Governance Framework with Consideration of UU PDP Compliance: A Strategic Approach for Data Protection and Management

Achieving alignment between business operations, Information Technology (IT) and regulatory compliance is a top priority for most organizations, including in the healthcare business sector. Hospitals as organizations, aside from running IT processes to support services to patients, also have to maintain a level of compliance with IT regulations. To ensure reliable IT management, comply with regulations and remain aligned with hospital business goals and strategies, it is necessary to develop an enterprise governance of IT that is reliable, supports business processes and is responsive to any amendments or additions to applicable IT regulations. The goal of this study is to develop efficient corporate governance in the healthcare industry by utilizing the COBIT 2019 framework. Qualitative and quantitative methods were used to identify key governance and management objectives. By engaging in various activities with hospital management, we reached conclusions about the governance design and suggested several governance and management objectives that can support the main business processes while still paying attention to the level of compliance with regulations that must be met. Hopefully, these recommendations can serve as guidance for similar organizations in terms of implementing an IT governance system using COBIT 2019.